Tenda Ac8 vulnerabilities, page 3

63 vulnerabilities

Known vulnerabilities in Tenda Ac8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2023-40895tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.EPSS0.93%9.8CriticalCVE-2023-40897tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.EPSS0.84%9.8CriticalCVE-2023-40893tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.EPSS0.93%9.8CriticalCVE-2023-40892tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.EPSS0.84%9.8CriticalCVE-2023-40900tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList.EPSS0.93%9.8CriticalCVE-2023-40898tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.EPSS0.84%9.8CriticalCVE-2023-40896tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.EPSS1.24%9.8CriticalCVE-2023-40891tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.EPSS0.84%9.8CriticalCVE-2023-40894tenda · ac8_firmwaretenda ac8_firmwareTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.EPSS0.84%9.8CriticalCVE-2023-48194tenda · ac8_firmwaretenda ac8_firmwareVulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained.EPSS0.65%10CriticalCVE-2023-4744tenda · ac8_firmwareTenda AC8 formSetDeviceName stack-based overflowA vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.EPSS1.85%7.5HighCVE-2023-39784tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function.EPSS0.81%7.5HighCVE-2023-39786tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function.EPSS0.81%7.5HighCVE-2023-39785tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function.EPSS0.81%9.8CriticalCVE-2023-38937tenda · ac10_firmware +6 moretenda ac10_firmwareTenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10 v4.0 V16.03.10.13 were discovered to contain a stack overflow via the list parameter in the formSetVirtualSer function.EPSS0.84%9.8CriticalCVE-2023-38935tenda · ac10_firmware +4 moretenda ac10_firmwareTenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the list parameter in the formSetQosBand function.EPSS0.85%9.8CriticalCVE-2023-38931tenda · ac10_firmware +7 moretenda ac10_firmwareTenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and FH1203 V2.0.1.6 were discovered to contain a stack overflow via the list parameter in the setaccount function.EPSS0.84%9.8CriticalCVE-2023-33670tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.EPSS1.06%9.8CriticalCVE-2023-33673tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.EPSS1.06%9.8CriticalCVE-2023-33675tenda · ac8_firmwaretenda ac8_firmwareTenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.EPSS1.21%